Show simple item record

dc.contributor.advisor Mahadewa K
dc.contributor.author Sandaruwani JLAIA
dc.date.accessioned 2022
dc.date.available 2022
dc.date.issued 2022
dc.identifier.citation Sandaruwani, J.L.A.I.A. (2022). Automatic testing of smart speaker apps [Master's theses, University of Moratuwa]. Institutional Repository University of Moratuwa. http://dl.lib.uom.lk/handle/123/20321
dc.identifier.uri http://dl.lib.uom.lk/handle/123/20321
dc.description.abstract With the emergence of the Internet of Things (IoT), Smart Speakers open up a new world where we can talk to a machine for getting help in our day-to-day lives. The Smart Speaker Apps (SSA)s provide a user-friendly vocal experience to the customers by allowing them to dictate commands to the speaker through voice commands. Amazon Alexa is one of the most prevalent smart speakers which allows third-party developers to write SSAs called Skills. Due to the prevalence of Alexa, it has become vulnerable to security and privacy threats by malicious skill developers. In particular, Alexa skills could be overprivileged such that they collect more data than necessary or specified by the privacy policy in the skills description. In this research, we systematically explore skills to test whether the behaviors of the skills adhere to the privacy policy provided in the skill description. We extracted the utterances related to privacy-sensitive behavior of the skills through Natural Language Processing (NLP) techniques. Second, we implemented a dynamic testing tool Test case Generator & Invocator based on the fuzzing technique to automatically manipulate the inputs to the skills and observe the output to identify the skills which accept the privacy-sensitive information. During the study, we discovered that 21% of the tested skills accept privacy-sensitive data. We have simply focused on the real or actual behavior of the skills during the research. The claimed behavior of the skills is covered by our study, which will be the focus of further work. en_US
dc.language.iso en en_US
dc.subject VULNERABILITIES en_US
dc.subject PRIVACY en_US
dc.subject AUTOMATIC TESTING en_US
dc.subject INTERNET OF THINGS en_US
dc.subject SECURITY en_US
dc.subject AMAZON ALEXA en_US
dc.subject ALEXA SKILLS en_US
dc.subject INFORMATION TECHNOLOGY- Dissertation en_US
dc.subject COMPUTER SCIENCE - Dissertation en_US
dc.title Automatic testing of smart speaker apps en_US
dc.type Thesis-Abstract en_US
dc.identifier.faculty IT en_US
dc.identifier.degree Msc. in Information Technology en_US
dc.identifier.department Department of Information Technology en_US
dc.date.accept 2022
dc.identifier.accno TH4825 en_US


Files in this item

This item appears in the following Collection(s)

Show simple item record